Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3ppm-vmgq-rr54

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.

EPSS

Процентиль: 90%
0.05268
Низкий

7.5 High

CVSS3

Дефекты

CWE-772

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 19 лет назад

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.

CVSS3: 7.5
nvd
почти 19 лет назад

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.

CVSS3: 7.5
debian
почти 19 лет назад

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors ...

EPSS

Процентиль: 90%
0.05268
Низкий

7.5 High

CVSS3

Дефекты

CWE-772